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Field 


Length 


Description ^ 


Payload ID 


2 bytes 


Enumerated type describing the payload type of the.meSsage: Further 
processing of the message is directed by this field. The currently 
payload identifiers include: 

Type Value Description 
AERE INVALID 0 Invalid type 
AERE FILE KEY 1 File key payload 
AERE_,BLK_XFER 2 Block transfer 
AERE STATUS 3 Aereous status 


Flags 


2 bytes 


Flags indicating payload processing requirements. The currently 

defined flags include: 

Flag Bit Description 

Encrypted 0 Payload encrypted 

Signed 1 Payload signed (not implemented) 

Reserved 2-15 unused 


Length 


2 bytes 


Length of message, in bytes. This length measures the field through the 
last byte of the payload. 


Source ID 


2 bytes 


Source identifier — uses user or server entity identifier defined in the 
entity database. 


Destination 
ID 


2 bytes 


Recipient identifier - uses user or server entity identifier defined in the 
entity database. 


Timestamp 


4 bytes 


Timestamp (obtained fi-om local or trusted timing source) of message 
creation. Used to ensure fi*eshness (e.g., mitigate replay attacks). The 
time is represented by the standard POSIX 32 bit second identifier 
(seconds since epoch). 


SeqNo 


2 bytes 


Sequence number used to ensure the ordering of messages. 


AckNo 


2 bytes 


Acknowledgement of all messages up to including Ackno. 


Payload 


variable 


This is the variable length data to be interpreted by payload processing. 
The format of the payload is detailed in Section 7.3. Based on message 
flags, this data require additional process (e.g., encryption, sign). 


Hash Algo. 
Identifier 


2 bytes 


Enumerate type defining the hash algorithm used in the calculation of 
the keyed hash. The following hash algorithms are supported by the 
Aereous system; 

Algorithm Value 

AERE MD5 0 
AERE SHAI 1 


HMAC 
Length 


2 bytes 


The length of the HMAC value. Note that some crypgraphic algorithms 
output more ciphertext than the original plaintext. (Question: Is this 
really needed, or can we always calculate this from the key/hash 
algorithm info?) 


HMAC 


variable 


This is the keyed hash of the message. This value is calculated over all 
bytes prior to the hogmnrng of the hash length field. 
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X 



Name 


Length 


Description 


KeyAlgorithmID 


16 bits 


(enumerated) identifies both the algorithm and the key length 


BlockSize 


16 bits 


block size for the accessed file 


IV 


256 bits 


Initialization vector used to seed the encryption of file blocks. 
Further details are defmed in Section 7.L 


KeyData 


256 bits 


The key used to encrypt the file. Where the key size is less than 
256 bits, the most significant bits are used and unused bits are 
padded with zero. 


UsePolicies 


64 bits 


Flags indicating the enabled usage of access content (v^here a bit 
1 = allowed, 0 = denied). The supported bits include: 

Flag Bit Description 

Print 0 Print the file 

Copy 1 Copy file to local disk 

Send 2 Transmit the file to external device 

Reserved 3-63 unused 

NOTE: The set of usage types are identified in the Aereous Client 
Design Document, and will be reflected in fiiture version of this 
document as needed. 


Pathname 


(variable) 


fiiU pathname of file being accessed 
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Name 


Length 


Description 


Cid 


16 bits 


hashed pathname identifier (see Section 6) 


Block/Mumber 


16 bits 


block number of transmitted data 


Length 


16 bits 


length of data, typically equal to the block size supported by the 
filesystem 


Data 


(variable) 


the file data 
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Name 


Length 


Description 


Sid 


16 bits 


(enumerated) Type identifying the message semantics. 
Details of the status are further specified in the info and text 
fields, 

Enum Numeric Origin Description 

usageExec 0 client Usage right executed 
aereousError 1 both Aereous error 

encountered 

dfsError 2 both Filesystem error 
infoStatus 3 both informational (e.g., 

debugging) 

clientShutdown 4 client client shutdown signal 
serverShutdown 5 server server shutdown 

signal 

unused 6-2— N/A unused 


Infolength 


16 bits 


length of info field 


Info 


(variable) 


Additional status information. The interpretation of this field 
is directed by the Sid field as follows: 

Enum Subflelds 

usageExec content ID {cid), usage mask 
aereousError Aereous error code 
dfsError standard UNIX ermo 
infoStatus information enum 
clientShutdown none 
serverShutdown none 
unused unused 


TextLength 


16 bits 


length of Texr field 


Text 


(variable) 


C-string description of information. Used in auditmg or as 
user notification. 
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Description 


Size (bytes) 


Contents 


Aereous Signature 


11 


'AEREOUS' +0x01301976 


Aereous File Version 


1 


Currently 0x1 


File ID 


8 


File's Aereous ID, 


Usage Count 


2 


Number of usages remaining. Set to 
OxFFFF for infinite usages* 


Expiration Date 


4 


A GMT ANSI RTL style time date stamp 
that indicates when this file expires. 


Usage Denied Content 


Varying 


Once a read attempt fails due to a 0 usage 
count, this content is displayed to the user. 
The format is described below under 
"Content Format." 


Number of Push 


2 


Number of items that are pushed to the use 


Content Items 




when the file is opened. 


Push Content Items 


Varying 


Array of push content items. The format is 
described below as "Push Content Item 
Format." 


Header CRC 


4 


A CRC value for the preceding header 
bytes. 


Content Size 


8 


The size of the imencrypted data 


Encryption Type 


1 


0 = Unencrypted 

1 = 2Fish 

2-255 = undefmed 


Encrypted Data Offset 


8 


A file offset to the beginning of the 
encrypted data. The encrypted data uses 
the format described in "Encrypted Data 
Block." 
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VirtualFile 

The VirtualFile table lists all files in the system. Each file is associated with a Plug-In 



and a bundle of facts that are unc 


erstandable by that Plug-In, 


Column 


Type 


Description 


Sample 


* VirtualFile ID 


Int 


System assigned ID 


314 


Name 


Text 


Name of the virtual file. This is the 
base name, with no parent directory 
names and no directory separator 
characters. The name is not case 
sensitive in the server core, but is 
allowed to be in the database engine. 


SalesReport 
.doc 


IsDefault 


Bool 


Flag indicating whether Name is 
actually a wildcard pattern match. Use 
of this flag allows directories to be 
setup and facts associated with them 
without havmg to database each of the 
files that could reside within that 
virtual directory. 


False 


VirtualDirectorylD 
(optional) 


Int 


ID of the VirtualDirectory that the file 
resides within. Use NULL for files 
that reside at the root level. 


4242 


PluglnName 


Text 


Identifies which plug-in will generate 
the actual file contents. 


FTP 


IsStatic 


Bool 


Flag indicating whether the file is an 
actual static file on the server disk of a 
true virtual file. 


True 


FactBundlelD 
(optional) 


Int 


Facts for this file. These facts are 
considered to be "owned" by this file 
and will be deleted if this file entry is 
deleted. 


4243 


SharedFactBundlelD 
(optional) 


Int 


Facts for this file. These facts are not 
"owned" by this file, instead existing 
as shared facts to assist with 
centralized administration. 


12000 


ShouldLogUsageEvents 


Int 


Flag indicating whether any access to 
this file should result in an access log. 

• 1 indicates there should be a 
log generated 

• 0 means no log should be 
generated 

• Null or -l means that the value 
of this setting should be 
inherited from the parent 
directory or the 

DefaultShouldLogUsageEvents 
configurable parameter 


1 
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